Our GDPR commitment

Voltarc is committed to full compliance with Regulation (EU) 2016/679 (the General Data Protection Regulation). This policy explains how the eight GDPR principles are implemented in practice across our product, engineering and customer-care teams.

Lawfulness, fairness and transparency

Every data-processing activity at Voltarc is mapped to a specific lawful basis in our Article 30 Record of Processing Activities, which is reviewed quarterly by our DPO. All customer-facing notices are written in plain English and translated into German, French, Dutch, Italian and Spanish.

Purpose limitation and data minimisation

We collect only the data we need to fulfil the specific purpose disclosed at the point of collection. New product features pass a Privacy Impact Assessment before launch; the assessment must demonstrate that no less-intrusive alternative is available.

Accuracy and storage limitation

Customers can correct their account information at any time. Automated retention rules purge data on the schedule disclosed in our Privacy Policy; deletions are logged for audit.

Integrity, confidentiality and accountability

All personal data is encrypted at rest with AES-256 and in transit with TLS 1.3. Access is granted on a least-privilege basis, requires hardware MFA, and is logged. We carry an ISO 27001 certificate and a SOC 2 Type II report, both renewed annually.

Exercising your rights

Email privacy@voltarc.com to access, rectify, erase, restrict, port or object to the processing of your data. We verify identity using a one-time code sent to the email on file and respond within 30 days. There is no charge unless requests are manifestly unfounded or excessive.

Breach notification

In the unlikely event of a personal-data breach that is likely to result in a risk to your rights, we will notify the competent supervisory authority within 72 hours and inform affected customers without undue delay.